v0.161.2

Infisical/infisicalv0.161.2Jun 18, 2026by scott-ray-wilson

AI Summary

Introduces significant PAM capabilities with sessions and audit logs, adds Postgres CLI support, and enables folder move operations. Also migrates OAuth apps to org settings and improves UI consistency.

Key Highlights

  • PAM sessions, audit logs, and access control pages
  • CLI support for Postgres
  • Folder move operation
  • KMS key rotation
  • OAuth applications moved to org settings

New Features

  • PAM sessions and audit logs
  • Postgres CLI support
  • Folder move operation
  • KMS key rotation
  • OAuth app reorganization

Full Release Notes

### Changed
- Adjust toast positioning to center (https://github.com/Infisical/infisical/pull/6916)
- Move OAuth applications to org settings (https://github.com/Infisical/infisical/pull/6895)
- Migrate webhook UI to v3 components (https://github.com/Infisical/infisical/pull/6894)
- Lead signup with full-width SSO buttons (GitHub first) (https://github.com/Infisical/infisical/pull/6882)
- Migrate add group to project modal to v3 (https://github.com/Infisical/infisical/pull/6846)

### Added
- Add copy path button to overview page and adjust truncation logic and breakpoint (https://github.com/Infisical/infisical/pull/6897)
- Add PAM sessions, audit logs, and access control pages (https://github.com/Infisical/infisical/pull/6893)
- Add CLI support for Postgres (https://github.com/Infisical/infisical/pull/6892)
- Add KMS key rotation (https://github.com/Infisical/infisical/pull/6843)
- Add move operation for folders (https://github.com/Infisical/infisical/pull/6823)
- Document projectSlug support in Kubernetes operator (https://github.com/Infisical/infisical/pull/6920)

### Fixed
- Preserve all intermediates when storing external CA certificate chain (https://github.com/Infisical/infisical/pull/6925)
- Treat GitHub revocation as no-op in dynamic secrets (https://github.com/Infisical/infisical/pull/6915)
- Require end-entity client certificate for identity TLS certificate authentication and document trusted-proxy header handling (https://github.com/Infisical/infisical/pull/6913)
- Truncate description to 512 chars for Terraform Cloud API in secret sync (https://github.com/Infisical/infisical/pull/6911)
- Use CA's own key algorithm when loading CA private key for signing (https://github.com/Infisical/infisical/pull/6909)
- Fix PlanetScale authentication in secret rotation (https://github.com/Infisical/infisical/pull/6888)


**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.161.1...v0.161.2